If I understand how this works though, it should be a relatively easy fix. They just need to get some more device creds to spoof with.